Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
File:                     V88585q2G1OO6nyy1Wo0vle4mvs.mft (raw, json)
Hash identifier:          6pao3Se8LStZpPsFUMyylotEh5+ZBXyU4QaRXVpzc5k=
Subject key identifier:   F5:83:6C:F7:DC:6E:98:A1:8D:1F:B5:DC:4A:67:8D:FB:34:A6:C2:9E
Authority key identifier: 57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB
Certificate issuer:       /CN=A917D4C4/serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB
Certificate serial:       0660
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
Manifest number:          065B
Signing time:             Tue 10 Jun 2025 14:46:42 +0000
Manifest this update:     Tue 10 Jun 2025 14:46:41 +0000
Manifest next update:     Tue 17 Jun 2025 14:46:41 +0000
Files and hashes:         1: V88585q2G1OO6nyy1Wo0vle4mvs.crl (hash: fF0Z2Yu8x6CIJ4Kpj9ew166/pcKJlylqzbqUSCZRfvY=)
                          2: 6DB6146E0E2F11EDB4659653C4F9AE02.roa (hash: jVO5wSX7TJcWYZD+VE2YuDs8rKtO7MY++7pypycZONE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.crl
                          rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 14:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1632 (0x660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D4C4, serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB
        Validity
            Not Before: Jun 10 14:46:41 2025 GMT
            Not After : Jun 17 14:46:41 2025 GMT
        Subject: CN=68484551-c3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:50:fd:3d:23:a7:2a:c5:c2:51:73:5f:b1:
                    b5:09:00:d9:07:ab:0e:c1:50:d5:cc:e8:7f:9b:79:
                    63:56:4b:74:91:6a:1e:9e:2c:af:96:cd:27:da:c9:
                    e1:37:97:ca:78:a8:bb:94:f6:3c:5e:0f:67:d8:22:
                    51:7d:9f:d9:23:b8:9b:39:98:5c:ce:5b:ba:23:ae:
                    62:c5:12:64:14:d0:17:76:ac:40:6c:ed:bd:fe:8e:
                    76:58:f0:5d:5e:64:9b:00:6c:c2:1b:b3:8a:7d:17:
                    6a:bb:f1:73:25:5a:2f:2b:ae:1c:8c:bc:77:da:ec:
                    4e:eb:97:44:ab:48:5f:75:0f:bd:8d:ad:22:8b:d9:
                    f6:0a:df:2f:35:a2:b8:eb:61:e5:98:09:92:5d:81:
                    96:97:53:9e:4d:f4:26:e0:aa:a9:d8:82:f4:0b:a2:
                    f4:13:61:73:6f:10:8f:2b:75:b6:6a:23:76:2d:46:
                    02:1e:5b:ec:b6:a9:5f:0b:e3:27:0a:3b:7a:e8:b1:
                    75:b6:66:50:d8:7f:bd:c8:10:08:eb:3a:94:99:e8:
                    42:8b:3d:09:8e:34:09:d4:6c:3d:bd:c6:07:f7:26:
                    77:43:b1:48:ba:32:bd:55:c3:8f:d9:3a:8d:25:8b:
                    22:52:71:b8:04:d8:c1:a1:a0:32:79:b5:09:1e:9c:
                    a3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:83:6C:F7:DC:6E:98:A1:8D:1F:B5:DC:4A:67:8D:FB:34:A6:C2:9E
            X509v3 Authority Key Identifier:
                keyid:57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a0:7d:22:aa:a6:bc:6c:6e:8a:42:7b:b7:60:81:bd:3a:2f:
         87:e9:6b:33:70:61:1e:1f:26:7d:c9:ea:b1:59:82:fc:f4:38:
         cf:5e:a1:48:47:b1:5c:19:87:c7:ee:56:04:0c:24:d0:c8:8d:
         18:a0:f2:8b:19:04:c2:99:98:dc:ce:59:1e:02:bd:f0:c2:59:
         16:6d:4f:ae:d5:13:80:72:68:b8:64:4d:cb:cc:40:ef:4e:a9:
         3c:7b:f8:b3:c7:ab:4b:f3:c7:fc:53:5c:d0:4a:32:be:ad:31:
         62:71:95:5d:8b:e4:62:aa:d5:22:27:66:90:16:f3:32:e8:92:
         c4:0a:de:29:22:e7:4d:62:17:83:6e:77:c4:50:f7:92:69:ba:
         3b:f9:6d:a2:2c:b1:b7:48:4c:db:bf:8b:f2:a2:25:d0:0a:ef:
         3e:8f:6f:d5:3b:b9:83:df:67:bf:e7:1e:28:7f:e2:c6:04:7e:
         f8:b0:4d:62:a1:6d:88:b8:59:23:6f:3c:7f:0b:5c:65:d6:8e:
         59:02:fc:8f:da:d8:ac:3c:ab:72:c1:68:e0:d5:ea:f8:f6:55:
         ab:8e:82:0f:4a:79:73:4e:49:8b:90:a9:e8:55:9f:26:51:04:
         4f:68:b1:7d:56:f4:49:6a:44:27:f9:5d:b0:00:7e:b8:83:33:
         e9:87:df:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:27:17 2025 by rpki-client